Released: January 2023 Exchange Server Security Updates

Arian_van_der_Pijl NorbertFe thanks for reporting. Indeed, there is another issue with the script. A fixed version should become available very soon (next few minutes) is now available.

momurray You are correct, the feature is not available on servers running the Exchange Edge role.

Arian_van_der_Pijl regarding the internal transport certificate: this is the default behavior of the New-ExchangeCertificate cmdlet which is used by the MonitorExchangeAuthCertificate.ps1 script. If the confirmation is suppressed via -Force parameter, the internal transport certificate will be replaced with the newly created Exchange certificate. If you run the script in unattended mode (via -confirm:$false) it takes note of the certificate which is configured as current internal transport certificate, creates a new certificate with -force parameter (to suppress the confirmation) and then it sets it back to the certificate which was used before. 

Therefore, if you run it in attended mode, you should enter "N" to keep the current internal transport certificate. See also: https://aka.ms/HC-InternalTransportCertificate